Extreme Networks BlackDiamond 6800 MPLS Installation And User Manual page 138

Configuring Destination-Sensitive Accounting
Table 8-2: Routing Access Policy Configuration Commands
Command
config access-profile <access_profile>
add {<seq-number>} {permit | deny}
[ipaddress <ipaddress> <mask> {exact}
| as-path <path_expression> |
bgp-community [internet | no-advertise |
no-export | no-export-subconfed |
<as_no:number> | number
<community]]
config access-profile <access_profile>
delete <seq_number>
config access-profile <access_profile>
mode [permit | deny | none]
8-4
Description
Adds an entry to the access profile. The explicit
sequence number and permit or deny attribute should
be specified if the access profile mode is none.
Specify one of the following:
<seq-number> — The order of the entry within the
I
access profile. If no sequence number is specified,
the new entry is added to the end of the
access-profile and is automatically assigned a value
of 5 more than the sequence number of the last
entry.
permit | deny — Per-entry permit or deny
I
specification. The per-entry attribute only takes
effect if the access-profile mode is none. Otherwise,
the overall access profile type takes precedence.
<ipaddress> <mask> — an IP address and
I
mask. If the attribute "exact" is specified for an
entry, then an exact match with address and mask
is performed. Subnets within the address range do
not match entry against entry.
as-path — A regular expression string to match
I
against the autonomous system path.
bgp-community — The BGP community number
I
in as_no:number format, or as an unsigned 32-bit
integer in decimal format. The BGP community
internet matches against all routes, because all
routes belong to the internet community.
Deletes an access profile entry using the sequence
number.
Configures the access profile to be one of the
following:
permit — Allows the addresses that match the
access profile description.
deny — Denies the address that match the access
profile description.
none — Permits and denies access on a per-entry
basis. Each entry must be added to the profile as
either type permit or deny.
MPLS Module Installation and User Guide